Business Continuity Analyst, Principal

The Business Continuity Analyst, Principal serves as the senior technical lead for Continuity of Operations (COOP), disaster recovery, and resiliency planning for enterprise domain administration and identity services. The position ensures that Mission Essential Functions dependent on Active Directory, authentication, authorization, multi-factor authentication, public key infrastructure, and related enterprise services can be sustained or restored during system outages, cyber incidents, facility disruptions, or continuity events.

The position works across business, cybersecurity, infrastructure, network, application, and operations teams to maintain resilient, compliant, and recoverable identity capabilities.

• Lead and maintain COOP, business continuity, disaster recovery, crisis-management, and identity-service recovery plans supporting Mission Essential Functions.
• Conduct Business Impact Analyses to identify critical identity dependencies, recovery objectives, operational risks, resource requirements, and single points of failure.
• Develop and test recovery procedures for domain services, authentication platforms, identity infrastructure, certificates, DNS, administrative access, and identity-dependent applications.
• Ensure continuity plans address loss of facilities, data centers, communications, servers, identity providers, key personnel, network access, and critical vendors through alternate-site, failover, reconstitution, and break-glass procedures.
• Plan and evaluate continuity exercises, recovery tests, alternate-site activations, and COOP events; analyze results and operational disruptions to drive corrective actions through closure.
• Maintain continuity risk registers, readiness metrics, recovery documentation, recovery-team rosters, and plan-validation records; advise leadership on readiness gaps, recovery priorities, and mitigation actions.

• Administer and secure enterprise Active Directory and identity services, including domain controllers, DNS, DHCP, Group Policy, user and privileged accounts, service accounts, delegated administration, and authentication infrastructure.
• Manage and troubleshoot identity-service operations, including directory replication, Kerberos, LDAP/LDAPS, Service Principal Names, account lockouts, authentication failures, and domain-controller health.
• Implement and maintain identity-security controls, including security baselines, Group Policy, Windows Defender, Bit Locker recovery-key escrow, audit policies, certificate deployment, endpoint hardening, privileged-access controls, role-based access, and password-rotation processes.
• Administer multi-factor authentication, federation, and PKI services, including Active Directory Federation Services, RSA authentication, smart card/CAC authentication, certificates, relying-party trusts, claims rules, authentication agents, and certificate lifecycle management.
• Ensure secure identity integration with enterprise applications, databases, network devices, virtualization platforms, cloud services, and cybersecurity tools.
• Maintain identity hygiene by removing stale accounts, obsolete permissions, legacy groups, inactive administrative access, and outdated recovery objects.
• Provide technical leadership for continuity and recovery planning by reviewing Business Impact Analyses, continuity plans, recovery strategies, exercises, risk assessments, and corrective-action plans; mentor junior personnel and lead assigned continuity or resiliency initiatives.

• Apply required security baselines, STIGs, CTOs, POA&Ms, organizational policies, and cybersecurity controls to domain administration and identity services.
• Condu…